Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File:                     pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier:          3WWl+HT1Cz4NcJFgXhbtBKX0u4EYEZRxvkx7bc3SaGo=
Subject key identifier:   75:BE:18:16:D2:69:DB:EC:87:39:F2:16:FC:74:F5:E0:2F:87:AE:96
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer:       /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial:       0197469E0F953A0FFDA056BE287F2D2E492B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number:          0B55
Signing time:             Fri 06 Jun 2025 19:00:53 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:53 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:53 +0000
Files and hashes:         1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
                          2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: UhD163eons7yfD6vqEbEQi29FY3DaVNajC6MN2M2Mjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:0f:95:3a:0f:fd:a0:56:be:28:7f:2d:2e:49:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
        Validity
            Not Before: Jun  6 19:00:53 2025 GMT
            Not After : Jun  7 19:00:53 2025 GMT
        Subject: CN=75be1816d269dbec8739f216fc74f5e02f87ae96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:f8:4c:36:05:e1:fd:cb:f0:fc:e3:ad:ae:
                    f3:a2:aa:ae:86:70:c4:39:7c:ed:8d:75:bc:49:62:
                    71:da:98:09:26:a2:41:79:15:55:d9:be:45:8e:fd:
                    94:10:8a:34:b0:38:e6:05:4e:2f:87:90:89:bc:73:
                    0f:df:02:17:ad:96:0b:68:c2:b0:07:6c:86:88:90:
                    17:d4:6c:2a:d5:18:0d:d7:09:ee:bb:e5:bb:3d:3d:
                    84:97:e1:c7:51:30:25:7b:9c:c5:21:02:6f:07:7e:
                    61:0e:10:6f:34:ed:53:13:df:00:9b:cf:9e:c0:cd:
                    c2:4c:2c:68:ce:8f:1e:b9:e2:c3:34:9f:fc:1f:53:
                    e8:d7:04:76:ac:0e:bf:1a:35:1a:60:f9:5c:65:2c:
                    11:12:e1:53:5a:bf:4e:18:12:9d:20:68:6a:6a:21:
                    6c:32:18:3b:26:0d:83:7f:5d:c7:c0:41:b3:7d:78:
                    c9:66:c1:bb:52:ca:26:19:e2:91:ae:2b:e6:f1:97:
                    37:7f:f8:24:b3:ec:5a:ad:17:86:f8:b7:a2:04:5a:
                    bf:99:d4:9c:29:e7:1d:bb:5e:f2:6d:e9:a0:26:e1:
                    3d:5f:d7:c3:cb:76:b0:d3:e1:7b:ee:6a:55:1e:1e:
                    35:a1:cb:d3:12:7e:10:9f:af:cf:b1:a3:de:52:34:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BE:18:16:D2:69:DB:EC:87:39:F2:16:FC:74:F5:E0:2F:87:AE:96
            X509v3 Authority Key Identifier:
                keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:4c:42:a7:f5:d6:0b:e9:0f:35:36:e5:7b:0b:4e:3d:c1:b9:
         76:9c:1e:57:7a:c5:82:8c:a0:c4:2e:a5:d1:75:68:82:51:9a:
         a6:a2:14:a7:7e:9b:7f:4d:81:47:11:ab:98:81:30:2b:f1:92:
         0c:39:fa:98:95:ba:ab:89:82:71:5e:55:07:bd:9b:09:a3:8a:
         59:0c:f2:02:26:21:cc:9d:ee:d2:24:bc:d7:4a:4c:47:4e:5e:
         28:e3:55:bf:ce:c2:e7:b4:ae:49:3f:d8:ad:32:10:7d:57:dd:
         ea:8b:db:ce:f1:b5:e9:71:60:c1:fd:33:92:ce:eb:5b:d1:37:
         8e:0c:23:17:76:d9:8d:5f:19:92:b4:fa:4e:c4:f0:d9:39:72:
         45:dd:a2:a1:dd:96:3c:3e:af:0e:b1:3a:05:de:97:dd:53:e9:
         41:fc:00:32:d2:ae:77:ba:52:e8:69:8d:06:3a:26:3a:b7:d5:
         f1:63:2f:49:b8:9d:dd:ed:a9:d7:41:f2:e1:2c:71:e5:6c:54:
         81:89:f6:38:34:17:53:65:7a:25:15:09:e3:10:72:36:99:da:
         45:32:81:07:42:04:f2:58:12:9e:02:41:df:2e:79:dc:d2:62:
         2a:e6:1f:83:d7:02:75:e2:78:57:d7:fe:52:2a:80:b3:1c:dc:
         0a:aa:b9:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGng+VOg/9oFa+KH8tLkkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MzNiZDExMWZkOGNiNzZmNDg4M2JiYmNiZmRhNTlkYjY2
ZWQyZGUwHhcNMjUwNjA2MTkwMDUzWhcNMjUwNjA3MTkwMDUzWjAzMTEwLwYDVQQD
Eyg3NWJlMTgxNmQyNjlkYmVjODczOWYyMTZmYzc0ZjVlMDJmODdhZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHT4TDYF4f3L8Pzjra7zoqquhnDE
OXztjXW8SWJx2pgJJqJBeRVV2b5Fjv2UEIo0sDjmBU4vh5CJvHMP3wIXrZYLaMKw
B2yGiJAX1Gwq1RgN1wnuu+W7PT2El+HHUTAle5zFIQJvB35hDhBvNO1TE98Am8+e
wM3CTCxozo8eueLDNJ/8H1Po1wR2rA6/GjUaYPlcZSwREuFTWr9OGBKdIGhqaiFs
Mhg7Jg2Df13HwEGzfXjJZsG7UsomGeKRrivm8Zc3f/gks+xarReG+LeiBFq/mdSc
Kecdu17ybemgJuE9X9fDy3aw0+F77mpVHh41ocvTEn4Qn6/PsaPeUjRsaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHW+GBbSadvshznyFvx09eAvh66WMB8GA1UdIwQY
MBaAFKczvREf2Mt29Ig7u8v9pZ22btLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzNiMTktMDgzOS00M2FjLThiNWIt
MDhjZWQ5MmM5NzcwLzEvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wNzNiMTktMDgzOS00M2FjLThiNWItMDhjZWQ5MmM5Nzcw
LzEvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkxCp/XW
C+kPNTblewtOPcG5dpweV3rFgoygxC6l0XVoglGapqIUp36bf02BRxGrmIEwK/GS
DDn6mJW6q4mCcV5VB72bCaOKWQzyAiYhzJ3u0iS810pMR05eKONVv87C57SuST/Y
rTIQfVfd6ovbzvG16XFgwf0zks7rW9E3jgwjF3bZjV8ZkrT6TsTw2TlyRd2iod2W
PD6vDrE6Bd6X3VPpQfwAMtKud7pS6GmNBjomOrfV8WMvSbid3e2p10Hy4Sxx5WxU
gYn2ODQXU2V6JRUJ4xByNpnaRTKBB0IE8lgSngJB3y553NJiKuYfg9cCdeJ4V9f+
UiqAsxzcCqq5TQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:40:46 2025 by rpki-client